Back to CVE Browser

CVE-2017-17625

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0250%

EPSS Percentile27.29th

PublishedDec 13, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Professional Service Script 1.0 has SQL Injection via the service-list city parameter.

Affected Platforms (CPE)

📦

On Demand Marketplace Script Project

On Demand Marketplace Script

= 1.0

References & Advisories

🔗 https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html

🔗 https://www.exploit-db.com/exploits/43294/

🔗 https://packetstormsecurity.com/files/145337/Professional-Service-Script-1.0-SQL-Injection.html

🔗 https://www.exploit-db.com/exploits/43294/

Related Vulnerabilities

CVE-2017-514510.0

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. S...

CVE-2017-278510.0

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially cra...

CVE-2017-332410.0

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcompone...

CVE-2017-278810.0

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet ...